Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: 96iRxDOuHmAiDf0YVmET+rQ7npNq6Xe7iWiCHT9mE18=
Subject key identifier: EB:08:A3:C0:48:92:4B:E9:CC:81:CA:13:BD:A4:BA:2E:D7:D6:B2:2C
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019D9AE38233B7E58111174BAB7B229883F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 103D
Signing time: Fri 17 Apr 2026 10:01:34 +0000
Manifest this update: Fri 17 Apr 2026 10:01:34 +0000
Manifest next update: Sat 18 Apr 2026 10:01:34 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: 6dSyNQ2nqGlWh9DKkxy2kPU1batQEFy6utjs+SU3s7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:82:33:b7:e5:81:11:17:4b:ab:7b:22:98:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Apr 17 10:01:34 2026 GMT
Not After : Apr 18 10:01:34 2026 GMT
Subject: CN=eb08a3c048924be9cc81ca13bda4ba2ed7d6b22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:14:94:24:69:59:25:c9:4b:25:36:6e:43:
ff:07:cf:00:d5:d5:78:b3:08:6f:2c:27:35:6f:bb:
9d:b9:e4:34:77:6b:50:3a:8f:8d:ce:7b:de:42:68:
66:21:e0:d0:48:49:4f:dd:5f:93:ee:99:f1:66:df:
aa:91:1d:d7:9e:c3:83:50:37:29:cd:60:f9:7a:0f:
c5:75:d5:0a:5c:8e:cc:a2:3f:69:49:55:c9:70:78:
da:c3:3c:f5:59:c7:b3:35:c4:a1:cc:31:71:28:38:
2c:88:5b:a2:4f:b3:3e:6d:06:68:46:db:c5:ee:78:
92:31:a7:40:64:c6:ff:1c:ce:8a:d6:40:e9:ab:07:
d5:b2:51:f0:69:63:ec:d8:4a:f6:21:ee:3b:eb:c2:
87:5e:97:0b:0b:58:8c:3e:f3:d7:79:16:f3:0d:5e:
11:a5:6d:5c:f9:c5:c1:a7:9c:01:6e:f2:d3:19:cb:
56:d1:81:07:1f:6f:1a:bb:7f:08:56:ed:e0:c8:60:
d2:ed:8e:18:97:07:28:35:42:61:35:a9:a1:31:ec:
62:b7:1f:04:ef:05:0d:a7:1b:67:69:52:31:92:28:
c6:b4:42:14:d8:f4:47:bd:b5:71:50:99:5b:77:72:
1f:77:57:f0:36:9c:f1:02:0b:78:3e:38:b3:c8:02:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:A3:C0:48:92:4B:E9:CC:81:CA:13:BD:A4:BA:2E:D7:D6:B2:2C
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d4:a5:2b:35:75:fa:08:51:78:3e:1a:e0:43:d0:ac:47:2a:
37:ee:fb:76:02:13:9a:e8:ea:03:cd:5c:c2:26:cd:ea:70:19:
14:84:ee:28:7a:8d:11:2b:e2:31:0a:6d:e9:e8:29:79:b3:75:
2f:b2:e4:a6:08:a6:6c:d8:29:44:5f:84:69:2b:cd:dc:79:ac:
f4:5d:db:d4:91:a8:b6:77:96:c4:17:fa:54:50:9c:5c:4a:9a:
bd:51:81:70:b7:d7:cc:16:3f:6f:6d:ee:80:1e:c5:33:ca:bd:
38:29:2e:78:14:66:20:8a:f1:0b:83:12:8a:7a:12:ca:73:0f:
35:17:00:f2:30:22:11:69:24:22:22:c4:02:32:fd:2d:f6:5f:
60:34:f2:98:97:30:5c:ed:54:96:8a:80:1d:0c:50:24:93:8f:
74:13:26:30:7b:d7:be:86:e2:f6:91:0f:26:f6:eb:b0:fd:81:
37:c7:23:9a:96:37:df:df:57:50:3d:06:0d:6c:97:5f:94:c2:
da:67:2f:4d:f8:fd:86:59:3d:01:e5:39:04:0d:26:fd:5b:ec:
3d:43:00:d5:9c:fe:8e:51:78:2e:7e:d0:3d:4a:23:e3:7f:b0:
2f:d8:8c:dc:a3:11:8f:12:b7:25:19:77:89:ed:c0:da:94:eb:
64:e3:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:18 2026 by rpki-client